tool
/
atlas
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

ATLAS-2793: updated AtlasClient approach of determining if kerberos authentication is enabled or not

This commit is contained in:
Madhan Neethiraj 2018-07-29 08:39:15 -07:00
parent 50c3adf151
commit b02238491e
2 changed files with 18 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
client/common/src/main/java/org/apache/atlas/AtlasBaseClient.java
View File

@ -266,7 +266,9 @@ public abstract class AtlasBaseClient {
final URLConnectionClientHandler handler;
if ((AuthenticationUtil.isKerberosAuthenticationEnabled())) {
boolean isKerberosEnabled = AuthenticationUtil.isKerberosAuthenticationEnabled(ugi);
if (isKerberosEnabled) {
handler = SecureClientUtils.getClientConnectionHandler(config, configuration, doAsUser, ugi);
} else {
if (configuration.getBoolean(TLS_ENABLED, false)) {

19
intg/src/main/java/org/apache/atlas/utils/AuthenticationUtil.java
View File

@ -20,6 +20,7 @@ package org.apache.atlas.utils;
import org.apache.atlas.ApplicationProperties;
import org.apache.atlas.AtlasException;
import org.apache.commons.configuration.Configuration;
import org.apache.hadoop.security.UserGroupInformation;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import java.io.Console;
@ -34,17 +35,27 @@ public final class AuthenticationUtil {
}
public static boolean isKerberosAuthenticationEnabled() {
boolean isKerberosAuthenticationEnabled = false;
return isKerberosAuthenticationEnabled((UserGroupInformation) null);
}
public static boolean isKerberosAuthenticationEnabled(UserGroupInformation ugi) {
boolean defaultValue = ugi != null && ugi.hasKerberosCredentials();
try {
isKerberosAuthenticationEnabled = isKerberosAuthenticationEnabled(ApplicationProperties.get());
return isKerberosAuthenticationEnabled(ApplicationProperties.get(), defaultValue);
} catch (AtlasException e) {
LOG.error("Error while isKerberosAuthenticationEnabled ", e);
}
return isKerberosAuthenticationEnabled;
return defaultValue;
}
public static boolean isKerberosAuthenticationEnabled(Configuration atlasConf) {
return atlasConf.getBoolean("atlas.authentication.method.kerberos", false);
return isKerberosAuthenticationEnabled(atlasConf, false);
}
public static boolean isKerberosAuthenticationEnabled(Configuration atlasConf, boolean defaultValue) {
return atlasConf.getBoolean("atlas.authentication.method.kerberos", defaultValue);
}
public static boolean includeHadoopGroups(){